Application Serial Number: 09/963,789 

Amendments to the Drawings 

Figs. 2 and 5-8 are amended as follows: 

In Figs. 2 and 5-8, reference sign "4" is replaced with -40-. 

In Figs. 5 ? reference sign "4A" is replaced with -40A-. 
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REMARKS 

Claims 2-20 remain pending. Claim 1 is canceled, and claims 2 5 10, and 20 are amended. 
No claims are added. 

Claim 1 stands objected to because of its reference to an attempted intrusion to the 
regular data storage means as "an illegal access to the regular data storage means." According to 
the Office Action, the phrase "access to the" would read more clearly as "access from the." 

Although applicants appreciate suggestions from the PTO, in this situation, applicants 
prefer to describe the attempted intrusion instead as "an illegal access intended for the regular 
data storage means." Applicants acknowledge that canceling claim 1 renders the objection moot. 
However, originally-dependent claims 2 and 10 are now rewritten in independent form, so this 
issue still needs to be resolved. Applicants respectfully submit that the corresponding 
description now recited in claims 2 and 10 describes the invention sufficiently clearly. 

Claims 1, 10, 1 1, and 14-20 stand rejected under 35 U.S.C. § 102(a) as anticipated by ITL 
Bulletin (ITL), published by the U.S. Government. As discussed, claim 1 is canceled, so 
therefore its rejection is moot. Regarding claims 10, 11, and 14-20, applicants respectfully 
traverse their rejection. 

Claim 10 describes an intrusion preventing system, and the claim specifies that: 

the regular data storage means is a regular server, and the decoy data storage 
means is a decoy server. 

Claims 1 1 and 14-19 depend from claim 10, so they also include this subject matter. 

As supposed justification for the rejection, the Office Action only references page 4, 

column 3, of ITL. However, the cited excerpt has no apparent teaching of the claimed subject 

matter quoted above. For at least this reason, the rejection has not been justified. 
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Claim 20 (now amended to address informalities) also describes an intrusion preventing 
system, and this claim specifies that, for an access attempt to the regular region, a pseudo 
response command is returned that expresses a message that the access to the regular region has 
succeeded. According to the Office Action, anticipating subject matter can again be found in 
page 4, column 3, of ITL. However, this excerpt from the prior art has no apparent teaching of 
the quoted claimed subject matter. For at least this reason, the rejection of claim 20 has not been 
justified. 

If for some reason it is ultimately decided to maintain the rejection of claims 10, 11, and 
14-20, applicants request that the next Office Action include a photocopy of page 4 of ITL with 
the relied upon subject matter clearly annotated. Applicants respectfully submit that the cited 
prior art disclosure does not anticipate the subject matter quoted above, so the rejection of claims 
10, 11, and 14-20 should be withdrawn. 

Claims 2-9 stand rejected under 35 U.S.C. § 103(a) as obvious over ITL in view of Golan 
(U.S. Patent No. 5,974,549). Applicants respectfully traverse this rejection. 

Claim 2 specifies that, in the intrusion preventing system: 

... the regular data storage means and the decoy data storage means are 
respectively a regular region and a decoy region secured in different regions on 
the same server. 

Claims 3-9 depend from claim 2, so they also include this subject matter. 

The rejection in general relies on ITL as the primary reference, but this reference is not 
relied upon to teach a regular region and a decoy region secured on the same server. Instead, the 
rejection relies on Golan to suggest modifying the ITL system to have this feature. Specifically, 
column 2, lines 39-48, of Golan is cited to support the rejection. The cited Golan text includes 
the following: 
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The security monitor detects when such a download of a software component 
occurs and is operative to create the sandbox around it before it is permitted to 
execute. 

However, the Golan technology differs significantly from the ITL technology as follows: 
In ITL, an intrusion is detected and then redirected. In contrast, Golan discloses that, when 
downloaded software (whether an intrusion or requested) is detected, a sandbox is created around 
it. The cited text does not discuss redirecting the downloaded software. 

Therefore, Golan would not suggest to one skilled in the art modifying the ITL system to 
have a regular region and a decoy region secured in different regions on the same server. 
Applicants acknowledge that column 2, lines 39-48, is cited as supposedly supporting the 
obviousness rejection; however, this text does not discuss which parts of the Golan system reside 
on the same server. 

Accordingly, the rejection of claims 2-9 has not been justified, and applicants now 
request withdrawal of the rejection. 

Claims 12 and 13 stand rejected under 35 U.S.C. § 103(a) as obvious over ITL in view of 
FOLDOC (an on-line dictionary). Applicants respectfully traverse this rejection. 

The obviousness rejection of claims 12 and 13 is based in part on ITL anticipating parent 
claim 10. However, as explained above, the anticipation rejection of claim 10 is not proper. 
Therefore, the present obviousness rejection of claims 12 and 13 also cannot be proper. 

Accordingly, applicants request the withdrawal of the rejection of claims 12 and 13. 

In a separate matter, applicants amend the specification and drawings as shown herein to 
address informalities. No new matter is added. 

In view of the remarks above, applicants now submit that the application is in condition 
for allowance. Accordingly, a Notice of Allowability is hereby requested. If for any reason it is 
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believed that this application is not now in condition for allowance, the Examiner is welcome to 
contact applicants' undersigned attorney at the telephone number indicated below to discuss 
resolution of the remaining issues. 

If this paper is not timely filed, applicants petition for an extension of time. The fee for 
the extension, and any other fees that may be due, may be debited from Deposit Account No. 50- 



1250 Connecticut Avenue, N.W., Suite 700 
Washington, DC 20036 
Tel: (202) 822-1100 
Fax: (202) 822-1111 



Enclosure: Replacement Drawing Sheets (revisions to Figs. 2 and 5-8) 
JLF/asc 
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2866. 



Respectfully submitted, 
WESTERMAN, HATTORI, DANIELS & ADRIAN, LLP 




Joseph L. Felber 
Attorney for Applicants 
Reg. No. 48,109 
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